CVE-2025-54143

critical · 9.8

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.

9.8

CVSS

0.5%

EPSS (exploit prob.)

41st

EPSS percentile

2025-08-19

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-693

Affected products

Vendor	Product	Affected versions
mozilla	firefox	< 141.0

Check a specific version with /api/v1/cve/match.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1912671
https://www.mozilla.org/security/advisories/mfsa2025-60/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-54143